๐จ๐ฆ
mitsurugi
2024-07-13 14:54:00
(2 years ago)
Xmlrpc attack.
Brute-Force
Web App Attack
๐ณ๐ฑ
BlueWire Hosting
2024-07-13 14:10:13
(2 years ago)
Probing for Wordpress vulnerabilities
Bad Web Bot
Web App Attack
๐ฌ๐ง
David Gebler
2024-07-13 13:47:09
(2 years ago)
34.87.29.21 - - [13/Jul/2024:13:47:08 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 1235 " ...
show more
34.87.29.21 - - [13/Jul/2024:13:47:08 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 1235 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
show less
Brute-Force
Web App Attack
๐ช๐ธ
10dencehispahard SL
2024-07-13 13:00:45
(2 years ago)
Unauthorized login attempts [ accesslogs]
Brute-Force
๐บ๐ธ
TPI-Abuse
2024-07-13 11:43:47
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 34.87.29.21 (21.29.87.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:225170) triggered by 34.87.29.21 (21.29.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 13 07:43:41.740129 2024] [security2:error] [pid 30269:tid 47826650679040] [client 34.87.29.21:59398] [client 34.87.29.21] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||arizonasolutionsgroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "arizonasolutionsgroup.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZpJobdPYvU2ofoD5nfOOUAAAAEM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-07-13 10:37:35
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 34.87.29.21 (21.29.87.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:225170) triggered by 34.87.29.21 (21.29.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 13 06:37:30.509347 2024] [security2:error] [pid 11314:tid 46934821742336] [client 34.87.29.21:52079] [client 34.87.29.21] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kemalinal.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kemalinal.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZpJY6lNNXg09WeAhtw89AAAAAQ4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-07-13 10:04:39
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 34.87.29.21 (21.29.87.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:225170) triggered by 34.87.29.21 (21.29.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 13 06:04:31.212275 2024] [security2:error] [pid 19824] [client 34.87.29.21:50451] [client 34.87.29.21] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.gemco-mfg.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.gemco-mfg.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZpJRLzQ-XkIqMwaYfCu9OAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-07-13 09:26:56
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 34.87.29.21 (21.29.87.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:225170) triggered by 34.87.29.21 (21.29.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 13 05:26:51.954446 2024] [security2:error] [pid 3389] [client 34.87.29.21:54287] [client 34.87.29.21] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||michaelpmcgrath.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "michaelpmcgrath.com"] [uri "/blog/wp-json/wp/v2/users/"] [unique_id "ZpJIWw_uEf_6CfmDhBuAQQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-07-13 09:11:23
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 34.87.29.21 (21.29.87.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:225170) triggered by 34.87.29.21 (21.29.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 13 05:11:17.352968 2024] [security2:error] [pid 1202] [client 34.87.29.21:61613] [client 34.87.29.21] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.bitcoinsubscribers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.bitcoinsubscribers.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZpJEteGfSY9enmKRyecOxAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-07-13 06:31:08
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 34.87.29.21 (21.29.87.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:225170) triggered by 34.87.29.21 (21.29.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 13 02:31:02.959978 2024] [security2:error] [pid 22677] [client 34.87.29.21:64467] [client 34.87.29.21] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||closedfortheseason.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "closedfortheseason.com"] [uri "/wordpress/wp-json/wp/v2/users/"] [unique_id "ZpIfJhoc1erus5xudHhN0wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
EscapeR
2024-07-13 04:09:37
(2 years ago)
abuseipdb
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-07-13 03:11:28
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 34.87.29.21 (21.29.87.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:225170) triggered by 34.87.29.21 (21.29.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 12 23:11:25.650104 2024] [security2:error] [pid 6834] [client 34.87.29.21:61509] [client 34.87.29.21] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.badconsultingllc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.badconsultingllc.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZpHwXQO1eA--l-X8UqHT5gAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2024-07-13 02:53:48
(2 years ago)
(wordpress) Failed wordpress login from 34.87.29.21 (SG/Singapore/21.29.87.34.bc.googleusercontent.c ...
show more
(wordpress) Failed wordpress login from 34.87.29.21 (SG/Singapore/21.29.87.34.bc.googleusercontent.com)
show less
Brute-Force
๐บ๐ธ
TPI-Abuse
2024-07-13 02:49:17
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 34.87.29.21 (21.29.87.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:225170) triggered by 34.87.29.21 (21.29.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 12 22:49:14.103937 2024] [security2:error] [pid 13271] [client 34.87.29.21:56802] [client 34.87.29.21] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||americanvaluesbooks.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "americanvaluesbooks.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZpHrKt4BqTGFoAvuVhLMFgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
ps-center
2024-07-13 01:21:02
(2 years ago)
ABV: Web Attack GET //wp-includes/wlwmanifest.xml
Web Spam
Hacking
Bad Web Bot
Web App Attack